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IN THE CLAIMS 

1. [amended herein] A method for synchronizing state information in a security 
gateway cluster, said security gateway cluster comprising at least two nodes, said 

| method compris i ng th e st e p of : 
5 - storing state information in a first node and in at least a second node of said at 
least two nodes in said security gateway cluster, 

- state information stored in said first node comprises common state information 
and node-specific state information, 

- defining for each node belonging to said security gateway cluster a node-specific 
backup group comprising at least one node-specific backup node, 

- synchronizing said state information in said security gateway cluster by sending 
state information from said first node to at least said second node of said at least 
two nodes, 

- detecting in said security gateway cluster modification of state information- a 
pr e d e t e rm i n e d irr e gular l y occurr i ng act i on , 

- initiating said step of synchronization of state information as a response to said 
pr e d e t e rm i n e d — i rr e gu la r l y — occurr i ng action detected modification of state 
information so that modification of common state information initiates 
synchronization of common state information to all other nodes of said security 
gateway cluster, and modification of node-specific state information initiates 
synchronization of node-specific state information to nodes belonging to a backup 
group of said first node . 

2. [previously amended] A method according to claim 1, wherein said 
25 predetermined action is modification of said state information stored in said first 

node. 

3. [previously amended] A method according to claim 2, wherein in the step of 
synchronizing state information only modified part of the state information stored in 
said first node is sent. 

30 4. [previously amended] A method according to claim 3, wherein the modified part 
of the state information is sent from said first node to all other nodes of said 
security gateway cluster. 

5. [previously amended] A method according to claim 4, wherein the modified part 
of the state information relates to a certain protocol, authentication information, 
35 virtual private network parameters or intrusion detection system. 
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6. [previously amended] A method according to claim 1, wherein in the step of 
synchronizing state information all state information stored in said first node is 
sent. 

7. [previously amended] A method according to claim 1, further comprising the 
5 step of: 

- periodically synchronizing state information from said first node to at least a 
second node. 

8. [cancelled] 

9. [cancelled] 

10 | 10. [amended] A method according to claim 91, wherein said predetermined 
action affects number of nodes in said security gateway cluster, said method 
further comprising the step of: 

- redefining for at least one node belonging to said security gateway cluster a 
backup group comprising at least one backup node. 

15 11. [previously amended] A method according to claim 1, wherein said 
predetermined action is said first node failing to continue normal operation. 

12. [previously amended] A method according to claim 1, wherein said 
predetermined action is said second node requesting for state information. 

13. [previously amended] A method according to claim 1, wherein said 
20 predetermined action is said first node initiating a transition to offline state. 

14. [previously amended] A method according to claim 1, wherein said 
predetermined action is handling of data packets relating to a communication 
session in at least two nodes, one of them being said first node, and in that said 
synchronization of state information is performed between at least said at least two 

25 nodes. 

15. [previously amended] A method according to claim 1, wherein said 
predetermined action is a receipt of a data packet in said first node of said security 
gateway cluster, said data packet relating to a command to open a new 
connection via said security gateway cluster. 
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16. [previously amended] A method according to claim 15, further comprising the 
step of: 

- delaying sending of said data packet from said first node until said 
synchronization of state information is performed. 

5 17. [previously amended] A method according to claim 1, further comprising the 
step of: 

- delaying sending of a plurality of data packets from said first node until said 
synchronization of state information is performed. 

18. [cancelled] 

10 19. [cancelled] 

20. [cancelled] 

21. [cancelled] 

22. [cancelled] 

23. [cancelled] 
15 24. [cancelled] 

25. [cancelled] 

26. [cancelled] 

27. [cancelled] 

28. [cancelled] 
20 29. [cancelled] 

30. [cancelled] 

31. [cancelled] 

32. [cancelled] 

33. [new] A node of a security gateway cluster comprising 
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- means for storing state information of said node, said state information 
comprising common state information and node-specific state information, 

- means for defining for said node a node-specific backup group of nodes 
comprising at least one node-specific backup node, 

5 - means for synchronizing said state information in said security gateway cluster 
by sending state information from said node to at least one other node in said 
security gateway cluster, 

- means for detecting modification of said state information, 

- means for triggering said synchronization means as a response to said detected 
10 modification of state information so that modification of common state information 

initiates synchronization of common state information to all other nodes of said 
security gateway cluster, and modification of node-specific state information 
initiates synchronization of node-specific state information to nodes belonging to 
backup group of said node. 

15 

34. [new] A security gateway cluster having a plurality of nodes, at least one node 
comprising 

- means for storing state information of said node, said state information 
comprising common state information and node-specific state information, 

20 - means for defining for said node a node-specific backup group of nodes 
comprising at least one node-specific backup node, 

- means for synchronizing said state information in said security gateway cluster 
by sending state information from said node to at least one other node in said 
security gateway cluster, 

25 - means for detecting modification of said state information, 

- means for triggering said synchronization means as a response to said detected 
modification of state information so that modification of common state information 
initiates synchronization of common state information to all other nodes of said 
security gateway cluster, and modification of node-specific state information 

30 initiates synchronization of node-specific state information to nodes belonging to 
backup group of said node. 

35. [new] A computer readable medium containing a a computer-executable 
configured to perform at least the following routines for synchronizing state 

35 information in a security gateway cluster of at least two nodes when said program 
code is run on a computer node in said security gateway cluster: 
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- storing state information in a said node and in at least a second node in said 
security gateway cluster, said stored state information stored comprising common 
state information and node-specific state information, 

- defining for said node a node-specific backup group of nodes comprising at least 
5 one node-specific backup node, 

- synchronizing said state information in said security gateway cluster by sending 
state information from said node to at least said second node, 

- detecting in said security gateway cluster modification of state information, 

- initiating said step of synchronization of state information as a response to said 
10 detected modification of state information so that modification of common state 

information* initiates synchronization of common state information to all other 
nodes of said security gateway cluster, and modification of node-specific state 
information initiates synchronization of node-specific state information to nodes 
belonging to backup group of said node. 
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